Operatorless Istio with CORE packages only SKIP UPGRADE DEBUG
Package Merge Request
N/A
Package Changes
This MR adds 3 new templates for Operatorless Istio to BB:
- istioCore
- istioPublicGateway
- istioPassthroughGateway
Umbrella Template Updates:
- Added helper functions for the following:
- To determine if istioCore (operatorless) or istio is enabled
- To determine namespace where istio gateways reside
- To determine name of istio gateway (public vs passthrough)
- To determine namespace of istio ingress/egress for downstream network policies
- Updated all core packages plus SSO related packages to leverage above helper functions where necessary
- Removed hardcoded references to gateway ingress to use for Keycloak from test-values.yaml file
- Added new helm charts to package-mapping.yaml
- Added
statusof "alpha" to new packages to prevent deployment alongside other core packages
Ran a standard pipeline here using package validation to prove all packages still work with this new istio included (disabled by default):
https://repo1.dso.mil/big-bang/pipeline-templates/package-validation/-/pipelines/3978644
However, ran into an issue when using all packages label as both istio cannot be deployed at the same time (Will create a separate issue to work this as part of the second epic).
The pipeline attached to this MR is using the new istioCore and worked, but some tests failed which will need to get hammered out on second epic as well.
Story / Epic
closes #2256 (closed) &352 (closed)
Upgrade Notices
Operatorless Istio Upgrade Notice
This release includes pre-release packages for some new operatorless Istio components. These packages are in an alpha state and will be subject to rapid changes as Big Bang transitions to operatorless Istio. In the coming days, look for a blog post outlining Big Bang's strategy for migrating away from the Istio operator, what that will mean for Big Bang consumers, and a timeline for when these changes will be generally available. As always, we thank you for supporting Big Bang.